Nas Movie Download

• Analyzed: May 12, 2026, 3:32 AM
• Findings: 1
• Version: 3.2.2
• Hash: cd08f553f1a7f61a2ae540c65d24add0ee46a6c59a011c1d6edebbdc491a691c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle contains numerous high-risk behaviors and severe security vulnerabilities, though they appear to be the result of poor practice rather than intentional malice. Most notably, multiple files (SKILL.md, config/smb.env, and several Python scripts like archive-movie.py) contain hardcoded plaintext credentials for SMB, Jackett, and qBittorrent services. The scripts perform high-privilege operations, including 'sudo mount' commands in download-subtitle-smb.sh and automated package installation via 'pip install' in smb-browser.py. Additionally, generate-subtitle-script.py writes executable shell scripts to the filesystem. While these functions align with the stated purpose of NAS automation, the exposure of credentials and use of high-risk system calls make the bundle a significant security risk.